Stone Tape Consulting

Privacy notice

What this site collects, and what it does not.

This site is a set of static files. It has no forms, no accounts, no shopping basket and no comments. It does not set cookies, does not run analytics, and does not load fonts, scripts, images or anything else from a third party. Every file the site serves comes from one server, rented and configured by this company.

There is no consent banner because there is nothing to consent to.

Two things still involve personal data, and this notice is mainly about those two. The web server keeps access logs, and if you email me I will have your email.

Who is responsible

The controller for the processing described here is:

Controller
STONE TAPE CONSULTING LTD
Company number
17166663, registered in England and Wales
Registered office
5 Brayford Square, London, England, E1 0SG
Contact

There is no data protection officer. The company is not required to appoint one and has not done so voluntarily. Use the address above for anything covered by this notice, including any request about your rights. It reaches the sole director directly.

Server logs

The web server records each request it handles. A log entry contains your IP address, the date and time, the file requested, the response code and size, the referring page if your browser sent one, and the browser user agent string. An IP address can identify you, on its own or with other information, so these logs are personal data and are treated as such.

The logs exist so that the site can be kept running and defended. Concretely, that means diagnosing errors, spotting a server that has fallen over, and identifying automated abuse such as scanning and brute force attempts. The lawful basis is legitimate interests, under Article 6(1)(f) of the UK GDPR. The interest is operating and securing a small business website, and the processing is the minimum a web server does in order to answer a request at all.

Logs are rotated daily, and no entry survives more than fifteen days. They are not used to build a profile of you, not used for marketing, not combined with any other source, and not passed to anyone else except where the law requires it.

If you email me

If you write to the address above, I will hold your message, your email address, and anything else you choose to put in it, for as long as needed to deal with what you have written about. For a business enquiry that becomes a piece of work, correspondence is kept with the rest of the client records for six full financial years, which is what tax law requires. For an enquiry that goes nowhere, I delete the thread once it is plainly finished.

The lawful basis is legitimate interests for general correspondence, and taking steps at your request before entering a contract, under Article 6(1)(b), where you are asking about engaging the company.

The mailbox itself is run by the provider named in the next section, on the company's behalf and under contract. It is a business mailbox on the company's own domain. Nothing sent to it is forwarded to a personal account.

Please do not send special category data or anything confidential to a client of yours by email on an unsolicited basis. If we work together, we will agree a sensible channel for that.

Who else is involved

Two suppliers process data on the company's behalf, both under contract, and neither of them uses it for their own purposes:

Each of them engages its own subcontractors and publishes the list as an appendix to its processing agreement. One of those subcontractors has access to the server: Arsys Internet S.L.U. of Logroño, Spain, which operates and supports the platform on behalf of IONOS. The mailbox provider names two, IPB Internet Provider in Berlin GmbH and PlusServer GmbH, both of which supply data centre space, power and network in Germany rather than handling anything held in the mailbox.

Nothing is sold, rented or shared for marketing. There is no advertising network, no tag manager, no content delivery network and no embedded third party content anywhere on this site.

Where the data is held

The hosting supplier is a UK company and the processing contract with it is governed by English law, with disputes heard in England. The data centre holding the server was chosen in Germany, deliberately rather than by default, and the platform is operated and supported from Spain. Both countries apply the EU GDPR, and neither is subject to United States law on compelled disclosure. That was the point of choosing them.

The mailbox is held in Germany as well, by a German company. Germany and Spain are both covered by UK adequacy regulations, so sending data there requires no further safeguard, and the data is equally well protected once it arrives.

The mailbox contract commits the provider to performing the service exclusively within the European Union or the European Economic Area, with no exception written into it. The hosting contract makes the same commitment but reserves the possibility of processing elsewhere, where that becomes necessary to provide the service and the transfer requirements of the UK GDPR are met. Nothing described in this notice is held outside the UK and the European Economic Area today. If that changes, this page changes with it.

Automated decisions

There is none. No profiling, and no automated decision making with legal or similarly significant effects. Neither supplier named above is permitted, under its contract with the company, to use any of this data for its own purposes, and that includes training or improving any model.

Your rights

Under the UK GDPR you can ask for a copy of the personal data held about you, ask for it to be corrected or erased, ask for processing to be restricted, and object to processing that relies on legitimate interests. Where processing relies on consent, you can withdraw it at any time, though nothing on this site relies on consent.

Ask by writing to the contact address above. There is no charge and I will answer within one month. Be aware of a practical limit on server logs: they are indexed by nothing except time, so unless you can tell me the IP address you used and roughly when you visited, there is no way to find your entries among everyone else's, and I am not required to collect more data than I hold in order to make you findable.

Complaints

If you are unhappy with how your data has been handled, please raise it with me first, at the address above. You also have the right to complain to the UK supervisory authority at any time:

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline 0303 123 1113. ico.org.uk/make-a-complaint

Changes to this notice

If the site starts collecting anything, this page changes before that happens, not afterwards. The version and date below tell you which text you are reading.

Version 1.0  ·  6th August 2026  ·  stonetape.consulting